Name the decision this builds: hq ADR 0236 (0235 is the bus's snapshot)

internal/inventory/busstep.go

@@ -8,7 +8,7 @@ import (
 	"github.com/jackc/pgx/v5"
 )
 
-// BusStep is one planned bus upgrade (novox/hq to-be 45 §8, ADR 0235).
+// BusStep is one planned bus upgrade (novox/hq to-be 45 §8, ADR 0236).
 type BusStep struct {
 	ID         int64
 	Module     string

internal/inventory/catalogue.go

@@ -1194,10 +1194,10 @@ func (i *Inventory) Catalogued(ctx context.Context) ([]Entry, error) {
 // providedBy is what the source column says for a module the control plane ships.
 const providedBy = "the control plane"
 
-// Upgrade is what the mesh does when a module's current version moves (ADR 0162 §3, ADR 0235).
+// Upgrade is what the mesh does when a module's current version moves (ADR 0162 §3, ADR 0236).
 type Upgrade struct {
 	// RollOut is true when the machines running it are sent the new version: one machine first, judged
-	// at the gate, then the rest (ADR 0218, ADR 0235). False means record it and stop — the machines
+	// at the gate, then the rest (ADR 0218, ADR 0236). False means record it and stop — the machines
 	// running it are behind until a person pushes, which the mesh already reports.
 	RollOut bool
 	// Together is true when every machine running it is sent the new version at once. Only meaningful
@@ -1223,7 +1223,7 @@ func (u Upgrade) Policy() string {
 }
 
 // upgradeFrom is a module's policy from what the store holds of it: a person's choice, over the module's
-// own word, over the default — except that the bus is never rolled out, whoever says so (ADR 0235).
+// own word, over the default — except that the bus is never rolled out, whoever says so (ADR 0236).
 func upgradeFrom(chosen *string, together bool, why, by string, manifest []byte) Upgrade {
 	var m catalogue.Manifest
 	// Leniently: a policy is read from what was registered, and a manifest registered before a field it
@@ -1296,7 +1296,7 @@ func (i *Inventory) Upgrades(ctx context.Context) (map[string]Upgrade, error) {
 	return out, rows.Err()
 }
 
-// ErrBusIsPlanned is a person asking the bus to be rolled out: its upgrade is a planned step (ADR 0235).
+// ErrBusIsPlanned is a person asking the bus to be rolled out: its upgrade is a planned step (ADR 0236).
 var ErrBusIsPlanned = errors.New("the bus is never rolled out: its upgrade is a planned step a person starts " +
 	"with `bus upgrade`, which snapshots its streams first and checks them after")
 

internal/inventory/gate.go

@@ -12,7 +12,7 @@ import (
 	"github.com/novox/mesh-controller/internal/catalogue"
 )
 
-// The gate's verdicts (novox/hq ADR 0235, to-be 45 §8): what a build did on its first machine, and,
+// The gate's verdicts (novox/hq ADR 0236, to-be 45 §8): what a build did on its first machine, and,
 // for one that failed there, how it was put back. One row per build, written by the plan that rolled it
 // out, under the lease.
 

internal/inventory/migrations/0073-a-build-rolls-out-gated-and-rolls-back.sql

@@ -1,12 +1,12 @@
 -- A module's build rolls out one machine first, judged at a gate, and rolls back there when the gate
--- fails (novox/hq ADR 0235, to-be 45 §8, Phase 4).
+-- fails (novox/hq ADR 0236, to-be 45 §8, Phase 4).
 --
 -- 1. The upgrade policy becomes a person's choice over the module's own word. Until now every module
 --    held a policy here, 'record' unless a person had said 'roll-out', and nothing distinguished a
 --    'record' somebody chose from the default it always was. From here a null policy is no choice: the
 --    module's manifest decides (its `upgrade`, its data, whether it is the bus), and its default is to
 --    roll out. A 'roll-out' a person chose is kept as their choice. A 'record' is the old default and
---    becomes no choice — ADR 0235 decides it, and lists every module's resulting policy; a person who
+--    becomes no choice — ADR 0236 decides it, and lists every module's resulting policy; a person who
 --    wants one held again says so with `upgrade <module> record --why`, which is kept with its why.
 alter table module alter column upgrade drop not null;
 alter table module alter column upgrade drop default;

internal/inventory/plans.go

@@ -69,10 +69,10 @@ type PlanModule struct {
 	Build string `json:"build,omitempty"`
 	// Previous is the build the first machine ran of this module before the plan sent it the new one —
 	// the commit its last send carried (ADR 0221) — kept at the first send: what a rollback puts back
-	// (novox/hq ADR 0235). Empty when the machine had never been sent the module, or what it was sent
+	// (novox/hq ADR 0236). Empty when the machine had never been sent the module, or what it was sent
 	// is not known.
 	Previous string `json:"previous,omitempty"`
-	// Gate is the new build's judging on its first machine (novox/hq ADR 0235, to-be 45 §8), kept so a
+	// Gate is the new build's judging on its first machine (novox/hq ADR 0236, to-be 45 §8), kept so a
 	// controller replaced mid-judging resumes it, and read back through `plans` as the rollout's record.
 	Gate *PlanGate `json:"gate,omitempty"`
 }

internal/inventory/sent_builds_test.go

@@ -72,7 +72,7 @@ func TestTheCurrentBuildsAreTheCatalogues(t *testing.T) {
 	if err != nil {
 		t.Fatal(err)
 	}
-	// Rolled out by default, one machine first and gated (novox/hq ADR 0235).
+	// Rolled out by default, one machine first and gated (novox/hq ADR 0236).
 	if got := current["resolver"]; got != (CurrentBuild{Commit: "c1", RollOut: true}) {
 		t.Errorf("resolver is at %+v", got)
 	}